diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index f6e7f498c8..bf67c54f9f 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -163,6 +163,6 @@ jobs: output: 'trivy-results.sarif' - name: Upload Trivy SARIF report - uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 + uses: github/codeql-action/upload-sarif@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 with: sarif_file: trivy-results.sarif diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 0366aabf30..b9bd8ceecd 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -60,7 +60,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 + uses: github/codeql-action/init@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -87,6 +87,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 + uses: github/codeql-action/analyze@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 with: category: "/language:${{matrix.language}}" \ No newline at end of file diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index ffc87ed4c7..3bb5cf00bb 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -157,6 +157,6 @@ jobs: output: 'trivy-results.sarif' - name: Upload Trivy SARIF report - uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 + uses: github/codeql-action/upload-sarif@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 with: sarif_file: trivy-results.sarif